CVE-2026-81154 — Robo Gallery < 5.2.6 - Author+ Stored XSS via Image Alt Text

CVE-2026-81154

Robo Gallery < 5.2.6 - Author+ Stored XSS via Image Alt Text PUBLISHED

Description (CNA)

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape image alt text before outputting it in one of its gallery layouts, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any user viewing the affected gallery, including administrators.

Affected (CNA)

Vendor / product	Versions
Unknown / Robo Gallery	affected 0 before 5.2.6

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/c41c6bdc-a877-4012-9398-0fcdcc55c5a9/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.